#!/usr/bin/env bash

# elk必须以非root账号启动

echo "启动ELK..."

`pwd`/elk/elasticsearch-6.4.1/bin/elasticsearch -d

nohup sh `pwd`/elk/kibana-6.4.1-linux-x86_64/bin/kibana \
    > `pwd`/elk/kibana_logs.out 2>&1 &

nohup sh `pwd`/elk/logstash-6.4.1/bin/logstash \
    -f `pwd`/elk/logstash-6.4.1/config/logstash-indexer.conf \
    > `pwd`/elk/logstash_logs.out \
    2>&1 &

echo "ELK启动完毕"


ERROR: [3] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]
[2]: max number of threads [3804] for user [xsomnus] is too low, increase to at least [4096]
[3]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

bug fix methods
编辑 /etc/security/limits.conf,追加以下内容;
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096
此文件修改后需要重新登录用户,才会生效



[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

编辑 /etc/sysctl.conf,追加以下内容:
vm.max_map_count=655360
保存后,执行:

sysctl -p

重新启动,成功.

